Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
File:                     jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft (raw, json)
Hash identifier:          jsAlkS8K5/ZlUtHKmUV/YzJnPtbowrvYL28pymSKdFc=
Subject key identifier:   01:C3:CD:0F:1F:3B:69:9B:17:E8:55:D1:88:4F:95:33:95:2C:AF:FC
Authority key identifier: 8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC
Certificate issuer:       /CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
Certificate serial:       01A0C369462B3AAEB15D993D0638262CD908
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
Manifest number:          0A77
Signing time:             Mon 21 Sep 2026 10:00:51 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:51 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:51 +0000
Files and hashes:         1: hzS81GvZENh5FRkGbicEF2LdARk.roa (hash: q8906Tblj2ap141UnuPHJfh6mZPh8QOzg/WX4QoWW8Q=)
                          2: jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl (hash: TxvD8Jjsp9URwANBD+s5wlX1NaIUV5b14UDb28upHto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:46:2b:3a:ae:b1:5d:99:3d:06:38:26:2c:d9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e7fb5f52847f2170e67fcc25adf0b5d686ffafc
        Validity
            Not Before: Sep 21 10:00:51 2026 GMT
            Not After : Sep 22 10:00:51 2026 GMT
        Subject: CN=01c3cd0f1f3b699b17e855d1884f9533952caffc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:65:c4:82:92:ed:b6:69:90:b6:04:c6:76:7b:
                    41:15:1b:b6:eb:79:0e:3a:d1:7d:61:fe:8b:69:df:
                    b3:73:bd:41:d4:ea:ed:7a:f7:3f:03:f9:ac:51:8d:
                    0f:3a:35:e0:a0:56:dd:b0:17:f1:e2:ce:e8:3a:6a:
                    f2:6f:10:f3:18:0a:be:3b:a2:16:e3:59:c6:39:a5:
                    c2:c5:0c:8c:dd:12:db:82:35:07:13:eb:4e:8b:00:
                    74:ff:51:7b:5e:20:4f:d4:f6:42:69:73:f4:12:f2:
                    83:2d:82:4f:1f:7d:15:08:8b:ad:48:2b:92:11:93:
                    be:ed:80:ce:28:50:12:b1:af:24:2a:6b:44:ca:ad:
                    ef:86:20:f4:0c:43:45:c7:1b:85:62:6c:43:cb:63:
                    09:0a:7f:49:b9:6a:ae:a6:c9:57:e9:61:93:fa:99:
                    b7:cc:37:9e:59:0f:d4:00:23:d0:70:97:1f:13:1c:
                    14:24:33:f9:79:1e:b5:be:ca:88:32:12:6f:a9:7c:
                    03:e9:4c:e0:a5:a8:5b:f4:e1:ed:50:d0:ea:96:b2:
                    74:19:20:33:ea:87:dc:4e:55:3b:55:04:eb:5e:17:
                    d6:b4:69:31:8f:01:25:a2:7a:2f:cc:a5:93:05:e2:
                    28:e8:68:4c:76:6a:20:89:c8:06:c8:c1:98:95:2d:
                    a1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C3:CD:0F:1F:3B:69:9B:17:E8:55:D1:88:4F:95:33:95:2C:AF:FC
            X509v3 Authority Key Identifier:
                keyid:8E:7F:B5:F5:28:47:F2:17:0E:67:FC:C2:5A:DF:0B:5D:68:6F:FA:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jn-19ShH8hcOZ_zCWt8LXWhv-vw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ac770e-41da-4d36-97e2-1618d5eeaae8/1/jn-19ShH8hcOZ_zCWt8LXWhv-vw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:9c:b1:f3:8e:19:a0:22:18:86:ec:b6:66:cf:ed:df:11:92:
         92:3b:34:df:4b:bd:60:67:ec:3d:72:91:52:74:3b:07:f5:f2:
         60:f0:a6:2a:16:8e:67:1d:d1:14:ca:0c:c8:e5:22:6c:34:a1:
         3d:2d:f7:13:f4:de:ab:ea:e8:71:7f:5b:f3:3d:cb:72:2f:8a:
         65:f4:5a:ca:f3:b0:37:ac:95:64:ac:f5:d3:ca:78:41:7d:c2:
         a3:50:ca:78:dc:56:1d:80:b1:8a:22:cf:08:18:d8:a7:b3:8b:
         d7:9f:b3:82:0d:c5:6c:0e:d8:52:fd:42:fb:6c:49:f6:62:fe:
         ad:5d:b6:98:0f:4d:a2:11:07:bf:b3:aa:cc:c1:ea:3b:f2:b8:
         21:5b:2a:11:3b:68:07:9a:57:ba:1f:b1:de:ac:b9:e5:89:8c:
         cf:72:64:52:81:f3:69:8d:49:96:71:d8:90:aa:9d:af:b6:1e:
         b1:f4:55:a4:39:a4:a7:f0:85:97:75:b7:69:68:6d:ac:ab:b9:
         54:b9:b7:c9:b2:fe:94:95:65:04:24:e0:b9:37:f2:8e:7b:d8:
         84:7d:d4:51:d2:c9:b7:30:7f:63:e4:a2:89:cf:04:e1:54:00:
         01:de:db:1c:72:03:7f:18:a2:e8:3e:02:8d:a3:6e:bb:8e:19:
         36:02:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:03:30 2026 by rpki-client